◆ For IT & ISP teams

Your vault now works the field with you.

This is the full NettForge app for your PC — your entire vault with auto-login, plus the IT Field Kit: real ping, MikroTik RouterOS, Winbox and WireGuard-aware presence. Sign in once and your vault is just there — the same zero-knowledge encryption as the web, decrypted only on your machine.

Zero-knowledge · Argon2id · decrypts on your device · nothing uploaded
NettForge Desktop On-network
On-network — you can reach your gear
WireGuard connected (handshake 14s ago) · Core MikroTik reachable · 21 ms
Davo Tower 3 — Sectors
160.229.225.0/24
12 ms
WEBSSHWINBOX
1admin••••••
2adminSSH key
Emoya OLTs
172.16.5.0/24
no reply
WEBSSH
1admin••••••
2support••••••

Built for the everyday hassle

The things a browser can't do — done right, and kept private.

Devices & smart combos

Save a device or range once with the ordered username/password combos you use on that gear — towers, dishes, OLTs, switches, router boards. Copy them in order, or let NettForge try them for you over SSH until one logs in.

WireGuard-aware presence

Working from home? The Kit reads your MikroTik WireGuard tunnel and pings a canary on your network — so it shows your whole ISP network online when you're connected, and tells you to bring the tunnel up when you're not.

Real ping & monitoring

True ICMP ping and TCP checks (not a browser guess). Watch a PPPoE or host for a while and get a clean uptime/latency report you can export as CSV or PDF for a client.

Zero-knowledge, always

Your vault is decrypted on your device with your master password — the same Argon2id + AES-256 crypto as the web app. The server only ever holds ciphertext; nothing readable is uploaded, and it only probes the hosts you own.

Lives in your tray

A glanceable dot in the system tray — green when you're on-network, amber when your tunnel's down — so you know before you waste a minute on a device you can't reach.

SSH, RouterOS & Winbox

A built-in SSH/Telnet terminal with scoped auto-login that tries your combos in order until you're in, a MikroTik RouterOS snapshot (identity, uptime, CPU, PPPoE), and one-click Winbox — the moat no other password manager has.

Up and running in three steps

No backups, no fuss — if you have a NettForge account, you just sign in.

1

Download & install

Grab the installer below and run it — Windows 10/11, 64-bit. It sets up in seconds and adds a desktop shortcut.

2

Sign in with your account

Open NettForge and log in with your email and master password — the same account as the web. Your encrypted vault downloads and unlocks on your machine; your password never leaves it.

3

Your vault + network light up

Your whole vault is there with auto-login, your devices show live status, WireGuard presence sits on top, and the tray dot tells you at a glance whether you're on-network.

Download

Get NettForge for Windows

Free with your NettForge account. Windows 10/11, 64-bit. Installs in seconds — then just sign in.

Prefer no installer? Download the portable version — a single .exe you can run from anywhere.
This build isn't code-signed yet, so Windows may show “Windows protected your PC” → More info → Run anyway. That's expected for a new app — a signed release is coming.